DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0eb85afb4d212d45a10dd9429dd3f216_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0eb85afb4d212d45a10dd9429dd3f216_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0eb85afb4d212d45a10dd9429dd3f216_JaffaCakes118
Size
44KB
MD5
0eb85afb4d212d45a10dd9429dd3f216
SHA1
7b35bc049b2263b89c139d0317f74f76e158c5ed
SHA256
8a5a9d4d34af54e59b26e41cf21519d5ec3865417ab71b78dce1c7f1f86ccf0b
SHA512
a9c87c9ef2fe1d94ba3e308f6a8bcb847663cbe5f2da2b0d3296ce82c1217ae3215ad0e1f9f154d9bdb4b7627a2ab2d4aeb2864706317bc0b51c43d0d95717b7
SSDEEP
768:CvA+bRH7LLxEmDk+30KwP4pkavI83MgLa1KLBNp:CvNpCmYxvLG3NLaQdNp
Checks for missing Authenticode signature.
resource |
---|
0eb85afb4d212d45a10dd9429dd3f216_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
GetLocalTime
GetModuleFileNameA
InterlockedIncrement
VirtualAlloc
CreateProcessA
GetSystemDirectoryA
CloseHandle
GetWindowsDirectoryA
WinExec
CreateThread
CallNextHookEx
KillTimer
DefWindowProcA
SetWindowsHookExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
RegisterClassExA
FindWindowExA
PostMessageA
SetTimer
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
free
_except_handler3
strrchr
__CxxFrameHandler
??2@YAPAXI@Z
_stricmp
??3@YAXPAX@Z
strchr
sprintf
_initterm
malloc
_adjust_fdiv
fclose
fwrite
fopen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ